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THE STANDING COMMITTEE ON HUMAN 
RESOURCES DEVELOPMENT AND THE STATUS OF 
PERSONS WITH DISABILITIES 


has the honour to present its 
FOURTH REPORT 


Pursuant to Standing Order 108(2), the Standing Committee on Human Resources 
Development and the Status of Persons with Disabilities proceeded to the consideration of the 
Management of the Social Insurance Number. After hearing evidence, the Committee has agreed to 
report to the House as follows: 
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INTRODUCTION 


In the past decades, all Canadians have experienced significant changes in their everyday lives. 
The unprecedented pace of technological change has had an inescapable impact on communication, 
business and commerce, education, science, travel and entertainment. Responding to these changes 
presents great challenges for Canadians, for their elected representatives and for their governments; 
we are all constantly required to rethink accepted ways of “doing business.” As commerce and data 
management, in both the public and private sectors; moves from paper to cyberspace, Canadians 
need to feel secure about their personal information and they need reassurance that their privacy is 
not being sacrificed to efficiency. In many ways, the Social Insurance Number system is a prime 
example of a government operation that must meet the needs of the 21st century. 


Most residents of Canada — even an increasing number of children — carry a small white card 
in their wallets that bears a nine digit number and no picture. The card — a Social Insurance Number 
(SIN) card — was issued to them when they first began to work or applied for a government 
program. 


Since then — in some cases over three decades ago — most people have not had occasion to 
think about their SIN number very often. They enter it on applications, write it in the appropriate 
space on their income tax forms, and give it to financial institutions when they apply for an account, a 
loan or a credit card. Perhaps they have been asked for it — and used it — as personal identification 
when they want to pay by cheque, for example, at their local grocery store or as a guarantee when 
they rent a movie. The number and the card are both seemingly innocuous; they cannot be used to 
purchase anything; nor to guarantee admission into any attraction; nor to retrieve money from the 
bank; nor to qualify for a government program. 


Recently, it has become clear that the use of the Social Insurance Number and card, which has 
not been modernized since its inception in 1964, is causing unintended negative consequences that 
are felt by thousands — and potentially millions — of residents of Canada. In the past few months, 
several reports have identified serious problems and sounded the alarm about the evolution and use 
of the Social Insurance Number and card system. The scope and nature of many of these problems 
surfaced with the release, in September 1998, of Chapter 16 of the Report of the Auditor General of 
Canada — Management of the Social Insurance Number.! Given the wide-ranging implications of 
his findings, the Auditor General called for parliamentary action to review the administration and 
broader policy-issues associated with the Social Insurance Card and Number. 


In addition to administrative problems with the SIN system, experts have unanimously pointed 
to the threat posed by the expanded use of the SIN card in the private sector and the extent to which 


À Hereafter referred to as the Auditor General’s Report or Chapter 16. 


the number has strayed beyond its intended purpose as a file number for government programs. This, 
coupled with rapid technological developments, has raised alarm about the possibility of 
unauthorized and intrusive data-matching across government departments, within the private sector 
and possibly even between the public and private sectors. Many of these data matches take place 
without the card holders’ knowledge or informed consent. In combination, these circumstances 
underscore the importance of placing privacy and the protection of personal information at the centre 
of all debates about the current operation of the SIN system and its future. 


PART 1 — BACKGROUND 


Parliamentary Scrutiny 


Last autumn, two parliamentary committees undertook studies that explored various aspects of 
the administration and policy context of the Social Insurance Number. In late November 1998, the 
Standing Committee on Human Resources Development and the Status of Persons with Disabilities 
began a study into the SIN. Subsequently, the House of Commons Standing Committee on Public 
Accounts reviewed the work of the Auditor General, held hearings on the management of the SIN in 
Canada and tabled a report in the House of Commons on 4 February 1999. Our own work has led us to 
reinforce the Auditor General’s conclusion: There is a place for a parliamentary perspective on the 
current SIN system in Canada and an important role for parliamentarians in setting a direction for the 
future of the SIN system in Canada. 


The report of this Committee does not repeat the findings of the Auditor General. We 
acknowledge the thorough and detailed work done by his office whose team of auditors exposed a 
number of weaknesses with the way that the SIN and card system in Canada is currently 
administered. The Auditor General’s report also frames a series of important recommendations that 
set out remedies for the shortcomings of the system, as it presently exists. This Committee concurs 
with the findings of the AG and we support the content and the spirit of his recommendations. 


We recognize, however, that the Auditor General plays a role quite distinct from that of 
parliamentarians and parliamentary committees. He is charged with examining the operations and 
efficiency of government programs as they exist; he is not mandated to comment on policy directions 
for government programs, nor to make policy-related recommendations. Neither does he participate 
in political debates and decisions; that is for us as elected representatives. The Auditor General 
himself told us that: 


It is time to review the current roles, objectives and uses of the Social Insurance Number. 


The government should determine what it wants to do with the SIN, and should study other 
possible options at the same time. I also believe it’s essential that Parliament play a major role in 
debating these issues and in finding a satisfactory solution.” 


In the course of reporting on our deliberations, we want also to acknowledge the work done by 
our parliamentary colleagues on the Public Accounts Committee. Not surprisingly, their report 
echoed many of the Auditor General’s recommendations and alluded to some of the broader policy- 
issues that lay before Parliament and indeed before Canadians. The Twentieth Report of the Public 


Accounts Committee states that: 


2 Evidence, Meeting No. 43, 4 November 1998, p. 2. 


al] uncovered many shortcomings in the 
ally subordinate to the resolution of the 
al Insurance Number... 


While the audit [conducted by the Auditor Gener 
administration of the SIN program, these issues are re 
central question concerning the goals and objectives of the Soci 
Resolution of the SIN mandate is essentially a political issue and will require a decision from the 


Parliament of Canada.? 


Apart from our endorsement of this conclusion, we are in considerable agreement with the specific 
recommendations of the Public Accounts Committee. Our own build upon some of these. 


But as the Committee with a mandate to examine and report on issues related to the Department 
of Human Resources Development, the custodian of the SIN, we have also seen fit to add more 
“flesh” to the bones of what our colleagues recommended. Moreover, our Committee conducted 
more extensive hearings and heard from a wider range of interests within and without government. 
We have used this work as an opportunity to explore, in a preliminary fashion, some of the broader 


policy-issues. 


Nonetheless, while we moved forward, we came to realize that we have not had the time to 
conduct as in-depth a study of the overarching policy issues of privacy protection and data 
matching — central to the future of the SIN in Canada — as was undertaken by the former House of 
Commons Standing Committee on Human Rights and the Status of Persons with Disabilities. That 
Committee spent the better part of a year preparing its report, Privacy: Where Do We Draw The 
Line?, tabled in April 1997. The report, a path-breaking study, identified, explored and analyzed a set 
of complex issues with remarkable creativity and clarity. That Committee showed a very high level 
of unanimity in endorsing a comprehensive set of recommendations, based on a call for a Canadian 
Charter of Privacy Rights. 


Unfortunately, the dissolution of Parliament in 1997 eliminated the requirement for the 
government to prepare a comprehensive response to Privacy: Where Do We Draw The Line? which 
the Human Rights Committee requested. Consequently, the issues and recommendations have 
remained formally unanswered by the government. Our Committee feels that the depth and breadth 
of the privacy report frames many of the broad public-policy issues that are part of the debate over the 
future of the SIN in Canada. Such painstaking and important work should not be overlooked by the 
government when it prepares a response that addresses our work and our recommendations. 


The members of this Committee also acknowledge that Human Resources Development 
Canada (HRDC) has moved to address many of the issues regarding social insurance numbers raised 
by the Auditor General. We are confident that the Department has sought to mount a strategy to deal 
with the immediate administrative concerns around the SIN. However, where we feel it appropriate, 
we have asked HRDC to adjust its efforts in order to address our concerns. As a way of ensuring 
accountability, we have also identified time frames and reporting requirements for HRDC. In our 


Twentieth Report of the Standing Committee on Public Accounts, C hapter 16 of the September 1998 Report of the Auditor 


General of Canada (The Management of the Social Insurance Number), 4 February 1999, p. 7 


view, these adjustments reflect the seriousness of the issues outlined in our report and underscore the 
extent to which we intend to monitor developments on this file in the immediate future. 


This report, therefore, weaves together existing work on measures to reform the SIN system in 
Canada in the near future and, as well, sets out and frames some of the overarching considerations 
that should inform the larger debate about future directions. 


Our Workplan 


We set out on our study with the aim of operating efficiently and neither duplicating nor 
replicating others’ work. The Committee proceeded by holding a series of briefings and round tables 
that brought together the various governmental and non-governmental bodies with an involvement 
or interest in the current and future administration of the social insurance numbers, and placing these 
discussions in the broader policy-context. 


Obviously, the Auditor General served as a catalyst for our interest in the issue and he provided 
us with a detailed briefing about his investigation and conclusions. Then, we invited the various 
federal bodies with a mandate, or an interest, related to the administration of the Social Insurance 
Number system and its broader context. This included senior officials from the Department of 
Human Resources Development, as the “home” of the Social Insurance Number. In addition, the 
Treasury Board, responsible for the overall guidelines and directives for the use of the Social 
Insurance Number by federal departments and agencies as well as the Department of Justice, legal 
counsel and advisor to all federal-government users of the Social Insurance Number, sent 
representatives. The Privacy Commissioner of Canada, an officer of Parliament like the Auditor 
General, attended this meeting to provide us with his insights into the use of the Social Insurance 
Number and the nature of the reforms he thought advisable. 


In light of the widespread use of the SIN by other jurisdictions of government and by the private 
sector, we then held two round tables with as many of the interests as we could gather together. We 
heard from the privacy commissioners of Ontario and British Columbia, a municipal administrator 
from the City of Toronto responsible for corporate access and privacy, the Advanced Card 
Technology Association, the Consumers’ Association of Canada, the Canadian Bankers’ 
Association, Action réseau consommateur, Revenue Canada, and Income Security Programs 
(Human Resources Development Canada). We received several briefs including those from Equifax 
and written submissions from the Privacy Commissioner of Ontario and the Privacy Commissioner 
of Canada. 


At the end of our study, we invited the Department of Human Resources Development back to 
engage in a dialogue with us about what we had heard and how it might be applied. 


As our work proceeded, we grew increasingly concerned about the threat to personal privacy 
that exists in the current Social Insurance Number system. We also wanted to explore the 
implications for personal privacy of proposed changes. We, therefore, concluded by hearing from 


security experts who provided us with practical examples about the threats to privacy that currently 


exist and those that could be eliminated by reforming the system. 


Plus ça change 


When the SIN system was originally introduced in 1964, much of the debate revolved around 
the use of the number. Was it just a common file number for several federal government 
income/entitlement programs or was it a first step on the way to the introduction of a universal 
identifier for Canadians? The government of the day affirmed that the SIN was not intended to 
become any form of universal identifier. It was to remain simply a file number to record 
contributions and entitlements for the Canada/Quebec Pension Plans, Old Age Security and 


Unemployment Insurance. 


Over time, however, the SIN’s use has expanded both inside and outside government. First the 
Income Tax Act authorized use of the SIN as an identification number for tax purposes. Later the Act 
was amended to require the SIN for the purchase and cashing of Canada Savings Bonds. As a result, 
financial institutions began collecting the SIN of customers for tax reporting. Canadians are now 
required to have a SIN for their children, if they wish to register them for the newly introduced 
Registered Education Savings Plan. Today, more than 20 Statutes and Regulations and 7 programs 
cover authorized use of the SIN* (See Appendix B). 


The expanded use of the SIN inside government soon paved the way to broader use of the Social 
Insurance Number in the private sector. Before long, credit bureaus began to use the SIN to run credit 
checks on potential borrowers. Provincial social programs began using the SIN in the administration 
of benefits. Employers large and small used it as part of their tracking and accounting system for 
employee benefits. Mistakenly, the private sector began to look upon the SIN as a piece of 
identification and property owners asked for it on apartment rental applications, video stores 
required it as security for movie rentals, universities and colleges requested it on their application 
forms and pizza places even used it as a customer number for their delivery system. Apart from 
inappropriate use of the number, its uncontrolled use leaves Canadians vulnerable to serious 
breaches of their personal privacy that range from data-matching carried out without their 
knowledge and authorization, to identity theft. 


Federal Responsibilities for the SIN 


Within the federal government, a number of players have various roles and responsibilities with 
respect to the SIN. As we have noted, HRDC is the “custodian” of the SIN with responsibility for the 
issuance of cards, investigating suspected abuse and adjusting regulations if necessary. HRDC also 
manages the Social Insurance Register (SIR), a record of the personal information that individuals 
provide when they apply for a card, in a data bank that contains all of the SIN currently in use in 
Canada. Policy and guidelines that cover the collection and use of the SIN by federal departments 


4 Auditor General’s Report, Chapter 16, p. 16-8. 


and agencies, including data-matching, falls within the purview of the Treasury Board. The 
Department of Justice supports other departments with respect to legal advice for SIN-related 
questions that arise from the Privacy Act, and it also responds to questions from the general public or 
inquiries regarding the public and private sectors’ use of the SIN. The Privacy Commissioner has 
independent oversight responsibilities arising out of the Privacy Act and deals with individuals’ 
complaints about use of the SIN when these relate to infringement of personal privacy. An officer of 
Parliament like the Auditor General, the Privacy Commissioner reports directly to Parliament. 


Auditor General’s Report: Scope and Findings 


The Auditor General’s office undertook an audit of the SIN system in Canada. The audit’s 
objective focused on assessing the “management and control of the SIN to determine if it is efficient 
and effective and has an appropriate basis in legislation.” > In order to meet this objective, the audit 
encompassed the following tasks: 


° An examination of the role and use of the SIN in managing social programs and revenue 
collection; 


e An examination of the application process; 

e An examination of the management of the Social Insurance Register (SIR); 

e An examination of the procedures for the investigation of fraud and abuse; 

e Extensive analyses of the SIN databases; 

e Discussions with privacy experts and other organizations with interests in the SIN; 


e Interviews of officials at HRDC and other federal departments and agencies with 
responsibilities for the SIN as well as relevant agencies at the provincial level. 


The Auditor General’s study revealed a number of important problems with the current 
administration and control of the SIN system in Canada. These problems include: 


e The widespread use of the SIN across government departments and programs at the federal and 
provincial levels of government as well as at the municipal level; 


e The extent to which such widespread use contributes to the potential for fraud and abuse of 
government programs with potentially high financial costs to taxpayers; 


e The perception that the SIN is a national identifier and not simply a file number as was its 
original intent; 


5 Auditor General’s Report, Chapter 16, p. 16-9. 


© The extensive use and misuse of the SIN in the private sector (except in Quebec) which 


increases the potential for fraud, abuse and privacy infringements; 
¢  Significant gaps in the data integrity of the Social Insurance Register; 
+  Unacceptably low levels of effort dedicated to the investigation of SIN fraud and abuse; 
° Minimal penalties for such abuse and fraud; 
e A proliferation of temporary SIN cards with no expiry date; 
° — Problems with the application process including insufficient proof-of-identity procedures; 


° The need to re-examine the legal and policy framework for managing the SIN, including the 
issues of unauthorized data matching and privacy protection. 


An Approach to Reform 


Our work has led us to conclude that the issues identified by the Auditor General fall into two 
distinct categories which should be dealt with separately by the government in responding to this and 
to the other reports. The first of these is the short-term “fixing” of the current system. We are 
convinced that action on this front should be undertaken as soon as possible. At the same time, we are 
aware that there are another set of broader public-policy issues that need to be addressed. These 
concern the question of whether the SIN system needs to be overhauled and/or replaced by a 
common client identifier. While debate on these latter issues must begin now, we know that a 
resolution will take longer and require more information and study. We therefore recommend that: 


1. In modifying the Social Insurance Number (SIN) system, the Government of 
Canada should ensure that it proceeds on two tracks simultaneously: 


A. Immediately take steps to correct abuses of the management and control of 
the current SIN system as reflected in the recommendations in Part 2 of this 
report; and 


B. Address the longer term, broader public-policy issues related to the future 
of the SIN system, including the issues of privacy and data-matching. 


Our colleagues on the Public Accounts Committee underscored the need to move quickly on the 
first set of issues and their recommendations echoed much of what the Auditor General’s report 
identified as the immediate imperative to deal with pressing problems and to find workable solutions 
for the current system. As we also indicated, Human Resources Development Canada, the 
Department with the lead on management and control of the SIN system, has developed a 
comprehensive workplan (see Appendix C) to respond to the Auditor General’s concerns with the 
current system. Our recommendations in Part 2 amplify and expand on this work. 
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PART 2 — MANAGEMENT AND CONTROL 
OF THE CURRENT SIN SYSTEM 


The core of current problems with respect to the Social Insurance Number remains a lack of 
precision and clarity about its purpose. Originally developed as a file number for a few selected 
government programs, the SIN was never intended to become, or to be thought of as, a national 
personal identification system for residents of Canada. Yet, that is precisely how the SIN has come to 
be used. Canada now has a SIN system that is treated akin to a national identifier but contains none of 
the built-in safeguards that would, or should, govern such a system. Privacy experts all told us that 
Canada now lives in the worst of all worlds — it possesses a de facto national identifier system with 
no privacy protection. 


A formal legislative mechanism should be put in place to regulate the use of the SIN. 
Well-proven evidence that this legislative control can work was provided to us by Ontario’s 
Information and Privacy Commissioner who outlined the effectiveness of the 1991 Ontario Health 
Cards and Numbers Control Act in preventing abuse of the Ontario health cards. This Act was 
implemented and accompanied the release of the new health number in Ontario. Quite simply, the 
Act states that the health numbers may only be used for certain prescribed medical purposes and it 
creates an offence accompanied by stiff penalties for use of the card number beyond the bounds of 
those identified in the Act.f In that regard we recommend that: 


2. After appropriate consultations, the Government of Canada should prepare a 
Social Insurance Number Cards and Numbers Control Act that would set out 
the legal uses of the existing SIN in both public and private sectors and provide 
for penalties and fines for the misuse and abuse of the SIN. A draft bill should be 
tabled with this Committee no later than 31 December 1999. 


Despite claims about the widespread and inappropriate use of the SIN in the private sector, no 
study substantiates the extent of this inappropriate — or appropriate — use. Before effective 
solutions can be developed, we concur with the Privacy Commissioner for British Columbia in his 
conclusion that more attention needs to be directed to the extent of use and abuse of the SIN 
especially by the private sector. Therefore, we recommend that: 


3. All relevant federal government departments and agencies and the Privacy 
Commissioner of Canada should work with Statistics Canada to conduct and 
complete by 31 December 1999, an assessment of the impact and extent of use of 
the SIN in the public and private sectors. The findings of this study should be 


6 Evidence, Meeting No. 47, 3 February 1999, p. 6. 
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used in the development of a public education campaign regarding the use and 
abuse of the SIN. (See Recommendation 5) 


The Auditor General’s report indicates that valid SINs are held by many persons who have no 
legal status in Canada. In part, this situation arises from the practice of issuing temporary SIN cards 
(a series of cards that begin with 900) with no expiry date on the card itself or in the file of such 
numbers in the Social Insurance Register. These cards are issued to seasonal workers, foreign 
students and non-permanent residents such as refugee claimants. They are also issued to 
non-Canadian residents who invest in Canada or do their banking in Canada, in order to facilitate the 
filing of income tax returns. As the report indicates, more than 680,000 temporary cards remain 
active after a five-year period and the number of temporary SINs issued is more than double the 
number of non-permanent residents reported by Statistics Canada in 1997.’ Clearly, this situation 
requires immediate attention because the proliferation of such cards increases the potential for fraud 
and abuse. While we do not wish to penalize any holder of an existing temporary SIN card, we 


recommend that: 


4. HRDC should ensure that by 1 January 2000, all newly issued, temporary SIN 
cards have a clearly indicated expiry date on them. HRDC should also put in 
place a mechanism to review all existing temporary cards. While this review is 
taking place, holders should retain their existing temporary SIN cards. After 
consultations with the affected groups, but no later than 31 December 1999, a 
report indicating the results of this review and a plan and timetable for 
replacing outstanding temporary cards should be tabled with this Committee. 


Our hearings revealed a common conclusion: most Canadians are unaware of the problems 
linked to the SIN and they are also unaware of the scope and potential for abuse of the SIN. They do 
not have a clear understanding about the instances where they must provide their SIN, nor are they 
fully aware about the situations when they can refuse to divulge their number without suffering any 
consequences. The same situation of operating in ignorance applies to businesses and services in the 
private sector — both large and small. They often use the SIN as a cheap and convenient 
bookkeeping tool and business owners and employees may request or require clients and customers 
to provide their SIN in completely inappropriate situations. Some go so far as to deny a good or 
service if individuals refuse to divulge their SIN. The Privacy Commissioner for Canada told us that 
improper use of the SIN by the private sector generates the largest number of complaints received by 
his office. Individual Canadians, as well as all elements of the private sector, need to understand their 
rights and responsibilities with respect to the SIN. We therefore recommend that: 


5. Immediately following the passage of the Social Insurance Number Cards and 
Numbers Control Act, all relevant federal departments and agencies and the 
Privacy Commissioner of Canada should develop and embark upon a public 
education campaign regarding SIN in Canada. Such a campaign should: 


7 Auditor General’s Report, Chapter 16, p. 16-15. 
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¢ Be directed to both the public and businesses, services and organizations 
that operate in the private sector; 


e Inform citizens of the legitimate use of their SIN in both the public and the 
private sectors; 


¢ Inform citizens of their legal right to refuse to release their SIN; 


¢ Inform businesses, services and organizations of the legal limits of their use 
of the SIN; 


¢ Be made available and accessible to Canadians through a range of media 
including print, radio and television. 


Steps that will restore the integrity of the Social Insurance Register (SIR) remain central to 
efforts to straighten out SIN administrative problems. The SIR contains information provided by all 
applicants for a SIN: basic personal data such as dates and places of birth and death and mother’s and 
father’s names. The SIR is managed by National Services, a branch of HRDC that operates out of 
Bathurst, New Brunswick. The Auditor General found that although the register is generally “well 
protected and physically secure,” the integrity of the data in the register is compromised. For 
example, between 1965 and 1990 only 1 million deaths were recorded in the SIR compared to 4.4 
million deaths in the Canadian population. Moreover, the 1998 database of the SIR recorded 
771,000 persons over 90 years of age and 311,000 over 100 years of age, as compared to Statistics 
Canada’s count of 127,000 and 3,000 respectively. For the entire population of Canadians over 20 
years of age, the SIR contains more than 26 million entries as compared to Statistics Canada’s 
population estimates of slightly over 22 million for the same age range. This represents a huge 
difference of about 4 million people. In the face of an inability to reconcile the gap, there is an 
increased risk of fraud and abuse of the SIN that could represent a significant cost to Canadians in 
illegal and inappropriate access to federal and provincial programs.® 


HRDC officials told us that the Department has intensified efforts to address the gap in recorded 
deaths in the SIR. We also recognize that the provinces and territories have an essential role to play in 
providing vital statistics information to the SIR. Therefore, we recommend that: 


6. For the strict purpose of maintaining an accurate and up-to-date Social 
Insurance Register, HRDC should complete consultations with provincial/ 
territorial governments regarding the controlled and prescribed release of vital 
statistics (birth, death and name change) between provincial and territorial 
governments and the federal government by 31 December 1999. 


7. All exchanges of vital statistics data subsequent to these consultations should be 
approved by the privacy commissioners of the various jurisdictions involved 


8 Auditor General’s Report, Chapter 16, p. 16-12. 
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and the results of the consultations and exchanges reported in HRDC’s annual 


performance report. 


An additional concern with respect to the excess of cards in circulation and the procedures for 
the issuing of new cards arises from the proof-of-identity process for SIN applicants. Until 1976 
there was no proof-of-identity procedure at all; anyone who wanted a SIN simply filled in and 
returned a form. A card with the number was sent by mail. In consequence, as of March 1998, the SIR 
contained more than 16 million SIN card entries that were unsupported by any secondary 


identification documents.” 


We agree with the Auditor General that the managers of the SIR should pay more attention to the 
proof-of-identity procedures that are currently in place. As his report also found, there are often 
problems in verifying information contained on documents accepted for SIN applications. 


We also take heed of the Privacy Commissioner of Canada’s advice that procedures based on 
efficiency carry potential privacy costs. A recent pilot project of HRDC in New Brunswick provides 
for online verification of birth, death and name-change information provided by SIN applicants (to 
avoid fraudulent issuance of a number). But we add a note of caution. We agree that extending this 
type of identification system to other regions could go some distance in ensuring the accuracy of the 
SIR and eliminating the issuance of fraudulent new SINs. Nonetheless, we are also aware that the 
very province where the pilot was conducted does not have a privacy act. After reviewing “Working 


»10 


Group 2: Proof of Identity,” one of HRDC’s Working Groups, we recommend that: 


8. HRDC should move immediately to ensure that privacy concerns are given a 
high priority and submit reports from the Proof-of-Identity Working Group 
and all working groups identified in the Draft Work Plan for Improving the 
Administration of the SIN, to the Privacy Commissioner for comments. 


9. HRDC should issue an evaluation report on the New Brunswick Pilot Project 
and table the report with the Privacy Commissioner of Canada by 30 September 
1999. The Privacy Commissioner of Canada should table his comments on the 
evaluation report with this Committee no less than 30 days thereafter. 


10. HRDC should restrict any new procedures or programs to guarantee the 
validity of proof-of-identity documents to information that is clearly required to 
verify the documents’ validity. 


9 Auditor General’s Report, Chapter 16, p. 16-13 & 16-14. 


Human Resources Development Canada, 1998-1999 Workplan for Improving the Administration of the SIN, pp. 4-5. 
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During our meetings on the SIN system, we heard testimony — sometimes astounding — 
about the extent and impact of fraud and abuse. Because the SIN is the gateway to a number of federal 
and provincial programs, the potential cost to taxpayers in over-payments or fraudulent payments is 
profound. The Auditor General’s report identifies several instances where individuals applied for, 
and received, false SINs in order to file bogus Employment Insurance claims; lease vehicles for 
fictitiously created companies and then ship the vehicles out of the country for sale overseas; and to 
apply for, and receive, false GST and income tax refunds. We therefore recommend that: 


11. HRDC should put in place a plan that demonstrates its commitment to effective 
and timely investigations of fraud and abuse of the current SIN system. This 
plan should be tabled with this Committee by 31 December 1999. 


In light of the costs that result from the fraudulent use of the SIN, the federal government, and 
HRDC in particular, need to pay greater attention to the investigation of possible fraud. We concur 
with the Auditor General that such investigations are an extremely low priority item within HRDC. 
This situation should be rectified. One way to address this is to implement a better measure of 
performance. We believe that the existing performance measurement system at HRDC is inadequate. 
For example, it emphasizes savings generated from investigations of fraud and abuse to the 
Employment Insurance account. Any measure must take into account the fact that fraudulent use of 
the SIN card affects the full range of government programs that use the SIN as a file number (see 
Appendix B). We therefore recommend that: 


12. HRDC should create a new performance measure that demonstrates the 
accrued savings to the full range of government programs which result from 
pursuing the fraudulent use of a SIN. The business case for this new measure 
should be made to Treasury Board during the next round of submissions. 


13. HRDC should, based on the outcome of the newly designed measure, assign the 
appropriate level of human resources to investigate the fraudulent use of a SIN. 


14. HRDC should include in its next, and subsequent, Annual Performance Reports 
to Parliament, a specific section on the management of the Social Insurance 
Number and the Social Insurance Registry. 


Our recommendations thus far reflect those of both the Auditor General and the Public 
Accounts Committee, particularly with respect to the short-term and immediate problems that deal 
with the administration of the SIN system. We want responses to our recommendations to reflect the 
degree of consensus that has been expressed on these issues by all three parliamentary bodies. 
Actions should be taken swiftly to make the necessary corrections. 


15. HRDC should report to Parliament before 30 September 1999 on progress in 
implementing the 1998-1999 Workplan for Improving the Administration of 
the SIN (Appendix C of this report). 
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PART 3 — THE FUTURE OF THE SOCIAL 
INSURANCE NUMBER SYSTEM: 
PUBLIC-POLICY CONSIDERATIONS 


At the outset of this report, we noted that our hearings on the Social Insurance Number system 
raised more questions than they answered. Throughout our work, we were constantly confronted by 
our realization that a solution to the immediate administrative problems identified by the Auditor 
General’s report (dealt with in Part 2) does not tackle the central and fundamental problem within the 
context of the SIN system. As parliamentarians, we quickly understood that our job is to address the 
extent to which the SIN system has evolved and strayed from its original intent. Over and over, a 
variety of witnesses repeated the fundamental importance of clarifying the purpose of the SIN. 


The broader public-policy debate, therefore, should attempt to answer the following questions: 


1. Should the Social Insurance Number return to its original purpose as an account number to 
identify files of government programs? If so, can the SIN system be salvaged by following 
the recommendations set out above or should it be “scrapped” and replaced by a new 
card — for example, a Millennium card that incorporates new “smart card” technology 
such as a computer chip or biometric identification? 


2. Is it time formally to recognize the SIN’s de facto use and to take steps to convert the SIN 
into a national personal identification number for each and every resident of Canada? Can 
the introduction of such a card be accompanied by the use of encryption and other “smart 
card” features that will protect individual privacy? 


We were told — and we strongly agree — that any move to turn the SIN into a national 
identifier must entail widespread political debate as well as adequate and appropriate public input. 
The creation of a national identification system presents challenges to personal privacy that must be 
addressed. Personal privacy is too fragile; the guarantees of protection are too weak — and likely to 
remain so. The temptation for both the public and private sectors to use the data in any national 
identification system for unintended or unauthorized purposes could be intense and would have to be 
counterbalanced by adequate technical and legal safeguards. 


But we also think that Canadians need an opportunity to weigh the costs and benefits of any 
significant alteration of, or replacement for, the Social Insurance Number and to debate these in a 
public forum. Again, the temptation to use a reformed SIN system or a new card for purposes other 
than those for which it is intended will be very strong. Function-creep based on the demands for 
“efficiency” is a powerful argument to resist. Individual citizens do not fully understand what they 
may be giving up. We have already seen examples of this in the recent lawsuit launched, and won, by 


| y 


the Privacy Commissioner to prevent matching of information collected as Canadians enter or leave 


the country with unemployment insurance claims. In light of these considerations, we recommend 


that: 


16. HRDC should prepare a report by 31 December 1999 that sets out a series of 
options — including the associated costs — for improving or replacing the SIN 
system with an entirely new card system. This report should assess the feasibility 
of implementing in Canada a SIN administrative model that resembles the 
Belgium Crossroads Bank model (as discussed in Appendix D of this report). 


Our study of the Social Insurance Number has underscored our overall concerns about 
technology, privacy and data-matching. Witnesses constantly raised these broader issues in our 
hearings on the SIN. The report of the former House of Commons Standing Committee on Human 
Rights and the Status of Persons With Disabilities, Privacy: Where Do We Draw The Line ?, tabled in 
April 1997 dealt with these public-policy considerations in detail and at length. That report, the result 
of an intensive study into issues related to the impact of changing technology on human rights and 
privacy rights, amplifies and explains many of the concerns that came to animate our members as we 
looked at the narrower question of the future of the Social Insurance Number system. 


In our view, Privacy: Where Do We Draw The Line? identifies, discusses, evaluates and 
recommends measures to deal with these questions and it does so within a framework developed 
during very extensive public consultations and debate. Due to the timing of the Report’s release, 
there has not been a government response. Consequently: 


17. Respecting the existing legislation, we adopt the recommendations and 
acknowledge the dissenting opinion contained in the report Privacy: Where Do 
We Draw The Line?, the Third report of the House of Commons Standing 
Committee Human on Rights and the Status of Persons with Disabilities tabled 
in the House of Commons on 27 April 1997 (Appendix E of this Report). We 
request a response to these recommendations pursuant to Standing Order 109. 


In conclusion, we are left with a series of questions that we have not had as much time to explore 
as we would have wished. 


e _ If the SIN is “modernized” or “replaced”, how will citizens’ privacy rights be protected? 
¢ How will we ensure that inappropriate data-matching does not take place? 
° What are the best ways to guard Canadians against the rising incidence of identity theft? 


¢ Will we be prepared to respond to the request for a secure and unique identifier for Canadians as 
more and more commerce takes place electronically? 


* As technology expands and becomes more sophisticated, should the office of the federal 
Privacy Commissioner be given expanded powers to combat intrusions into 


| personal privacy of 
Canadians and if so, what would the scope of those powers be? À : 
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° What are the cost implications of ensuring privacy? 


e To what extent are Canadians prepared to shoulder the cost of expensive technology to ensure 
privacy? 


+ How do we balance the need for increased efficiency with the rights of individuals to privacy 
protection? 


e How do we deal, in a proactive fashion, with fraud and abuse of the SIN system as well as other 
forms of card fraud? 


These questions represent a sample of the broad public-policy issues that governments will 
have to deal with in the years ahead. None of these questions has a “yes” or “no” or a “right” or 
“wrong” answer. They all imply tradeoffs. The basic decisions here, as in the broad public-debate 
over personal privacy, is the requirement for “informed consent.” In order to make these decisions, 
politicians and Canadians need information and discussion. Too many decisions about the current 
use of the Social Insurance Number were made by default. This was, and is, not appropriate and 
should be avoided in the future. 
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APPENDIX A 
List of Witnesses 


Associations and Individuals Date 


Office of the Auditor General of Canada November 4, 1998 
L. Denis Desautels, Auditor General of Canada 
Maurice Laplante, Director 
David Rattray, Assistant Auditor General 

Department of Justice November 26, 1998 
Lita Cyr, Counsel 


Brian Jarvis, Legal Counsel 


Human Resources Development Canada 


Jacques Bourdages, Associate Director, National 
Service 


Hy Braiter, Senior Assistant Deputy Minister 
Bob Nichols, Director 

Office of the Privacy Commissioner of Canada 
Julien Delisle, Executive Director 


Bruce Phillips, Privacy Commissioner of Canada 


Treasury Board of Canada 
Ross Hodgins, Senior Policy Officer 


Ian Sinclair, Director, Information Policy 
Division 
Advanced Card Technology Association of Canada February 3, 1999 
Catherine Johnston, President and CEO 


City of Toronto 


Rita Reynolds, Director, Corporate Access and 
Privacy Office 


Consumers’ Association of Canada 


Jim Savary, Professor 


Information and Privacy Commissioner 


Ann Cavoukian, Information and Privacy 
Commissioner 


David Flaherty, Information and Privacy 
Commissioner 


“A ction/réseau consommateurs” February 10, 1999 


Marie Vallée, Analyst, Policy and regulatory 
matters, Telecommunications 


21 


Meeting 
43 


45 


47 


48 


eS a ee 


Associations and Individuals Date 


Meeting 


_" “Associations and Individuals | 


“Centre de bioéthique, Institut de recherches February 10, 1999 


cliniques de Montréal” 
Pierrot Péladeau, Scientific Coordinator, 
Telehealth Ethics Program 
Canadian Bankers’ Association 
Linda Routledge, Director 
Ted Rowan-Legg, Assistant General Counsel 
Richard Rudderham, Vice-President 


Revenue Canada 
Kathy Turner, Director General 


Royal Canadian Mounted Police 


Victor Gareau, Staff Sergeant 


Human Resources Development Canada March 3, 1999 


Jacques Bourdages, Associate Director, 
National Service 


Dennis Kealey, Director General 


John Knubley, Assistant Deputy Minister, 
Insurance 


Doug Matheson, Director General, Insurance 
Service 


Ibis Research Inc. March 9, 1999 
Alan Breakspear, President 


Signals 9 Solutions 
Philip Attfield, President 
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APPENDIX B 
Authorized Uses of the Social Insurance Number (SIN) 
(Exhibit 16.1 of the Auditor General’s Report) 


Statutes and Regulations 

1. Budget Implementation Act (Canada Education Savings Grants) 

2. Canada Elections Act | 

3. Canada Labour Standards Regulations (Canada Labour Code) 

4. Canada Pension Plan Regulations (Canada Pension Plan) 

5. Canada Student Financial Assistance Act 

6. Canada Student Loans Regulations (Canada Student Loans Act) 

7. Canadian Wheat Board Act 

8. Employment Insurance Act 

9. Excise Tax Act (Part IX) 

10. Garnishment Regulations (Family Orders and Agreements Enforcement Assistance Act) 
11. Farm Income Protection Act 

12. Gasoline and Aviation Gasoline Excise Tax Application Regulations (Excise Tax Act) 
13. Income Tax Act 

14. Labour Adjustment Benefits Act 

15. Old Age Security Regulations (Old Age Security Act) 

16. Tax Rebate Discounting Regulations (Tax Rebate Discounting Act) 

17. Veterans Allowance Regulations (War Veterans Allowance Act) 


Programs 


1. Income and Health Care Programs (Veterans Affairs Canada) 


2. Immigration Adjustment Assistance Program (Citizenship and Immigration Canada) 
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3. Labour Adjustment Review Board (Human Resources Development Canada) 

4. National Dose Registry for Occupational Exposures to Radiation (Health Canada) 

5. Rural and Native Housing Program (Canada Mortgage and Housing Corporation) 

6. Social Assistance and Economic Development Program (Indian and Northern Affairs Canada) 
7. Income Tax Appeals and Adverse Decisions (Revenue Canada) 


Source: Department of Justice and Treasury Board Secretariat, June 1998 
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APPENDIX C 


DRAFT 


HUMAN RESOURCES DEVELOPMENT 
CANADA 


RESPONSE TO THE AUDITOR GENERAL’S 
REPORT 


1998-99 WORKPLAN FOR IMPROVING THE 
ADMINISTRATION OF THE SIN 


W/Z 


amet 
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Introduction 


The following sets out key elements of a workplan for improving the administration of the SIN, 


which is in response to the Auditor General’s report. 
Background 


Evolution of the SIN 


The Social Insurance Number (SIN) was introduced in 1964, to provide Unemployment Insurance, 
Canada Pension Plan and Quebec Pension Plan clients with a file number. In 1967, it also became a 
file identifier for Revenue Canada. The Proof of Identity (PID) Program was established in 1976 to 
verify the identity and the status in Canada of individuals applying for a SIN. The program’s 
objective was to prevent the assignment to individuals of more than one number and to ensure the 


integrity of the Social Insurance Registry. 


Roles and Responsibilities Regarding the SIN 


e HRD is the custodian of the SIN: Responsible for issuing SINs, maintaining the SIN data base, 


investigating abuse, and making regulations. 


e The Treasury Board is responsible for the policy and guidelines that govern the collection and 
use of the SIN at the federal level. 


¢ Privacy Commissioner investigates complaints about the SIN. 
¢ Justice supports other departments in providing legal advice for SIN related questions arising 
under the Privacy Act and responds to general enquiries on the private sector’s use of the SIN. 


Auditor General’s Report 


In 1998 the office of the Auditor General (AG) of Canada carried out a thorough review of the Social 


Insurance Number (SIN). The findings of the audit are contained in Chapter 16 of the AG’s report 
tabled on September 29, 1998. 


HRDC has taken the lead on the administrative weaknesses identified in the management of the SIN 
and, as such, with the assistance of Income Security Programs, Statistics Canada and Revenue 
Canada, has identified a number of short-term action items: 


O February, 1999 Assistant Deputy Minister to meet with Social Services and Vital 
Statistics counterparts 

O March, 1999 Add OAS Mortality and certified data from active data base 

O April, 1999 Revenue Canada file of all active SIN’s on IDENT database 
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O May — June 1999 Add OAS Mortality and certified data from archived files 
Determine SIN activity from OAS archived files 


Key Administrative Issues Raised by the Auditor General 


Human Resources Development has been administering the SIN in accordance with the intent 
of its legal framework whereby the SIN is intended to be a file identifier (account number) for 
certain federal government programs. However, the public often perceives the SIN to be a 


personal identifier or even an identity card. 


The use of the SIN outside the federal domain has evolved beyond the intent of the Treasury 
Board policy established in 1989, aimed at preventing it from becoming a national personal 
identifier. Their audit found that the SIN has become the common numerical identifier both 
inside and outside the federal government for a wide range of income related transactions and 


benefits, among other uses. 


However, the SIN program has a number of weaknesses relating to data integrity, proof of 
identity, SIN penalties, SIN investigations and the SIN card (For more detail, refer to Appendix 
“A” — actual comments from the Auditor General’s Report). As the use of the SIN has become 


more widespread, these weaknesses have grown in importance. 


HRDC Response: Key Challenges 


In response to the Auditor General’s report, HRDC has identified five key administrative challenges: 


1. Address issues related to the integrity of the data on the Social Insurance Register. 
2. Examine the Proof of Identity program and its scope. 
3. Consider how best to improve the quality and number of SIN investigations. 
4. How to better prevent SIN fraud including the possibility of administrative penalties. 
5. Explore changes to the SIN card: 
- Expiry date for temporary SINs 


- More secure SIN card if government chooses to introduce a personal identifier. 


HRD Workplan 


HRD, aware of its responsibilities related to the issuance of Social Insurance Numbers, maintenance 


of the Social Insurance Register, and investigation of suspected abuse has developed a workplan 


based on the activities of five working groups: 
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Working Group 1: Data Integrity 


° What: Improve integrity of data on Social Insurance Register (SIR). Not all deaths are recorded 


nor departures from the country. 
° Who: HRD: National Services (lead), Insurance Services, Systems, Income Security, 


Investigation and Control; and Revenue Canada 


¢ How: 
D Reduce number of uncertified accounts through access to other programs with 
Proof of Identity. 


Annotate ”unused” SINs e.g. no action at RC, CPP, EI etc. 


Increase number of recorded deaths through possible access to provincial data, 
Statistics Canada, External Affairs etc. 


e Possible Outcomes: 


O MOUs and Agreements to access other federal or provincial birth, death and 
name change data. 


Data matching to address backlog of mortality data. 


Access to EI, Income Security and Revenue data to determine if SIN remains in 
active use. 


° Milestones: 


D November, 1998 Complete formation of project team 
First draft Terms of Reference document 


December, 1998 Determine contents of SIN data base 
Letter to Statistics Canada requesting mortality data 


O March, 1999 Add OAS Mortality data from active data base 
Determine SIN activity from OAS active data base 
Revenue Canada file of all active SINs on IDENT database 


D April, 1999 Determine sources of additional birth and mortality data 


Implementation strategy for acquiring additional birth and 
mortality data 


O May, 1999 Address remaining uncertified accounts 
Add OAS Mortality data from archived files 
Determine SIN activity from OAS archived files 


July, 1999 First draft report 
Working Group 2: Proof of Identity 


¢ What: Review Proof of Identity process used to support SIN application. No PID required until 
1976 as SIN viewed simply as file identification number. 


e Who: HRD: National Services (lead), Insurance Services, Investigation and Control, Income 


Security; Citizenship and Immigration and Revenue Canada. 
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e How: 


Review primary documents used to support SIN application. 


Review SIN application processing procedures. 


Review PID procedures used in other programs and jurisdictions. 


Recommend new PID. 


Implement tighter controls. 


e Possible Outcomes: 


1. Additional documentation of identity required at time of application. 


2. Verification of documentation at originating source e.g. Link to Provincial Vital Statistics 
to verify birth data. 


e Milestones: 
November, 1998 Complete formation of project team 
First draft Terms of Reference document 
December, 1999 Implement procedures to track fraudulent identities 
January, 1999 Review PID supporting other programs 
April, 1999 Consultations and analysis with Provinces and territories 
March, 1999 Revise SIN handbook and plan for implementation on the Intranet 
June, 1999 First draft of report 


Working Group 3: SIN Penalties 


e What: To consider how best to prevent SIN fraud including the possibility of administrative 
penalties for offences because there is currently no effective penalty except when defrauding 


other programs (EI, Income Security, Revenue Canada etc.). 


e Who: HRD: Investigation and Control (lead), Benefit Entitlement, Insurance Services, Legal 


Services and Finance. 


e How: Determine options for preventing SIN fraud; Review possible legislative changes for 
SIN fraud including initial recommendations and considering Legal, charter and privacy issues. 


Regional consultations on impact. 


e Possible Outcome: 


3. No change. 
4. Increase public awareness. 


5. Implement penalty similar to that in EI. 
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Milestones: 


O November, 1998 Completion of project team 
First draft Terms of Reference report 


O December, 1998 Consultations NHQ 

O February, 1999 Regional consultations 

O March, 1999 Consultations on legislative wording 
O April, 1999 Submission to the Commission 


O Tobedetermined Decision on timetable to enact new legislation 


Working Group 4: SIN Investigations 


What: Consider how best to prevent SIN fraud; Consider the redesign of Investigation and 


Control performance indicators to encourage number and quality of SIN investigations. 


Who: HRD: Investigation and Control (lead); Consultations with Treasury Board, Revenue 


Canada and other departments and agencies that may be concerned with SIN fraud. 


How: Identify alternatives to the existing system and develop recommendations for 


Management Committee. 


Possible Outcome: 


6. Increase public awareness. 
7. Treasury Board recognition of value of SIN investigations. 
8. More officers assigned to SIN investigations. 


Milestones: 


November, 1998 Completion of project team 
First draft Terms of Reference report 


December, 1998 Establish SIN Investigations Monitoring Unit 


O January, 1999 Letter to Regions reinforcing the importance of letters of 
attestation 
February, 1999 Consultation and analysis 
March, 1999 First draft of report 
Implement Best Practices that would lead to successful 
prosecutions 


Working Group 5: SIN Card 


What: To consider expiry date on temporary SIN cards and to investigate upgrading the 
security features. 


Who: HRD: Insurance (lead), National Services, Income Security, 


Investigation and Control; 
Revenue Canada and Citizenship and Immigration. 
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How: 


Determine scope. 


Consultations and partnerships. 


Impact analysis. 


Q Implementation strategy 
Possible Outcome: 


No change to SIN card — confirm that it is a file identifier. 


Add an expiry date to temporary SIN cards only. 


Issue smart card. 


Will depend on government decision about future of SIN. 


Milestones: 
November, 1998 Compete formation of project team 
First draft Terms of Reference report 
December, 1998 Consultation with Citizenship and Immigration 
January, 1999 Consultations with authorized SIN users 
February, 1999 Consultations with partners (e.g. provinces) 
March, 1999 Consultations with employers, advocacy groups, 


Privacy and Human rights proponents 
Consultations with HRD Systems 


O April, 1999 First draft report 


Project Co-ordination: 


What: To coordinate the activities of all five working groups to ensure coherence and 
efficiency. To develop overall approach/plan to administrative issues related to the SIN. 


Examine possible awareness campaign. 


Who: Five chairs of working groups; selected participants of other departments (Revenue 


Canada, Treasury Board Secretariat, Industry Canada, Citizenship and Immigration). 


How: Multi-lateral meetings between HRDC, provinces, other government departments; 
ADM/DM meetings with HRDC and with other departments. 


Outcome: Consultation and plan with provinces involving social services departments, vital 


statistics and privacy coordinated approach and horizontal management of file. 


Milestones: 

Oo Aug. 1998 Presentation to Provincial/Territorial Information Technology 
directors 

ayesepal998 Presentation to F/P/T Directors of Social Services 
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Déc 1998 ADM level inter-departmental meeting followed by DM level 
meeting 

5 Jan.— Mar 1999  Negotiations on MOU with New Brunswick Human Resources on 
access to the SIR 

O Spring 1999 Discussions with officials and Deputy Ministers of Social Services, 
Vital Statistics and Privacy 


O March, 1999 Review of draft SIN Investigations report 
Oo April 1999 Review of draft SIN Penalties report 
O May, 1999 Table SIN Investigations and SIN Penalties reports with Project 


Steering Committee 


Summer, 1999 Review of draft Data Integrity, PID and SIN Card reports 
Table Data Integrity, PID and SIN Card reports with Project 
Steering Committee for decision. 


Appendix “A”: Actual Comments from the Auditor General’s Report 


Data Integrity: 
1. Significant gap between number of living SIN holders and the size of the Canadian population, 
a gap of about 3.8 million for those 20 or older: 


e The number of unrecorded deaths is one of the biggest factors in the gap; 


e The number of living Canadians registered in the SIN data base in 1998 
remains significantly higher than in Statistics Canada data; 


e Without additional efforts to record deaths, the gaps will continue to grow, 
along with the potential for confusion and inefficiency and the risk that the 
identities of deceased individuals could be used for fraudulent activities. 


2. Existing sources of information are not fully exploited and more could be done to develop new 
sources: 


° Data matching with the provinces, territories and in foreign jurisdictions are 
potential sources of information which could potentially reveal hundreds of 
thousands of unreported deaths; 


* Even though CPP, Revenue Canada and SIR are sharing more data, the 
problem of reconciling the various sources remains. For example, Revenue 
Canada does not provide SIR with corrections it makes to taxpayer files 
when it notes discrepancies in date of birth, name, etc. 


3. Millions of SINs are not certified for identity. There are approximately 11.8 million accounts in 


the SIR that because of potential for error, misuse and abuse, could cause major concerns to 
those who make significant use of the SIN. 


4. Birth Information is not easily validated with the issuing organization: 
e SIR does not generally confirm the validity of information shown on 


pee accepted for SIN application with the organizations that issued 
them; 
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Section 6(2) of the Privacy Act requires government institutions to ensure 
that personal information being used for administrative purposes is as 
accurate, complete and up-to-date as possible. 


Proof of Identity: 


1. More rigour needed in the Proof of Identity program: 


¢ Generally, the SIN application process asks for only one identity document 
and does not have other means to confirm identity such as those of other 
HRDC programs as well as Passport Canada; 


e In general, mailed applications represent somewhat of a greater risk than 
in-person applications, because certified photocopies are accepted — which 
themselves could have been certified fraudulently — and applicants who 
raise suspicion cannot be questioned; 


e About 20 per cent of total SIN cards issued annually are to replace cards that 
owners have reported lost, stolen or broken. Controls on this activity need to 
be improved. 


2. Relying mainly on the birth certificate as the foundation of identity has major drawbacks. The 
birth certificate has the following limitations: 


e Relatively easy to forge or alter; 
e  Paper-based so it deteriorates rapidly making information harder to verify; 
e Not linked to the bearer through any special security features; 


e Widespread reliance on documents issued by various agencies creates an 
inter-dependence. This makes all parties more vulnerable; 


e For the SIN, the extent to which the identity document is validated depends 
on the ability of HRDC clerks and agents to recognize fraudulent or falsified 
documents; 


e Design changes in documents, lack of photographs, the mobility of 
individuals who may be carrying identification produced in many different 
jurisdictions, all make it increasingly difficult for program staff who review 
documents to identify forgeries or altered information; 


e The reliability of these documents is not given a rating and so the 
Department’s approach is not tailored according to the quality of identify 
documents provided by issuing organizations. 


SIN Penalties 


Penalties resulting from successful SIN investigations are minimal 


° The Employment Insurance Act states that the penalty for committing any offenses related to 
the SIN is a fine of up to $1,000 and/or imprisonment for up to one year. Charges under the 


Criminal Code can also be pressed; 
° Very few perpetrators are caught and, even then, the Department rarely brings criminal charges; 


° Such low fines do not appear to warrant the considerable time and effort that prosecution entails 


and their deterrent effect is doubtful. Thus, there is effectively no penalty for activities that 
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could cause considerable damage to social programs, tax collection, commercial activities and 


the privacy and security of individual Canadians 


SIN Investigations 
1. Minimal effort is dedicated to SIN investigations: 


+ Since HRDC is responsible for controlling the SIN, it is vital that it conduct 
proactive and effective investigations in order to prevent, detect and deter 
abuses that could potentially cost taxpayers many millions of dollars and 
cause hardship; 


¢ Identity theft — the illegal use of a person’s identity information, including 
the SIN — is a growing phenomenon in North America; 


° The already small number of SIN investigations continues to decline; 


° The Income Security Programs Branch conducted even fewer Sin-related 
investigations than the Employment Insurance investigators. Certain Income 
Security programs may be very vulnerable to fraud. 


2. SIN investigations could provide substantial results: 


¢ There are many types of SIN investigations that lead to investigations. SIN 
abuses are reported by Revenue Canada, Employment Insurance, Canada 
Pension Plan, and by provinces. Others are reported by financial institutions. 


3. The quality of SIN investigations needs to be improved: 


e In the AG’s estimation, fewer than one percent of investigations ultimately 
generate a strong enough cases to lay charges; 


4. Existing performance indicators discourage SIN investigations 


¢ The savings to other programs that are generated through SIN investigations 
are not attributed by HRDC to Employment Insurance investigators; 


+ The end result of the performance measurement model is that EI 
investigators give SIN investigations a very low priority; 


° The decline in the number and quality of SIN investigations can also affect 
the integrity of the SIN data base; 


SIN Card 
1. Valid SINs are held by thousands of individuals with no legal status in Canada. 


° Since 1976, when the 900-series began, 1,242,000 temporary SINs have been 
issued. In 1998, some 680,000 temporary SINs remain active and 66 percent 


of these are over five years old, a long period of time for a number 
considered temporary; 


° The gap could represent SIN holders who are residing here illegally. 


2. The SIN card was not designed to identify the bearer. Thus, the SIN card h 
that are unique to the bearer (photograph, descri 
deter falsification and improper use of the card. 


) as no security features 
ption etc.) and that could serve to prevent and 
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APPENDIX D — HUMAN RESOURCES 
DEVELOPMENT CANADA, 
COMMON CLIENT IDENTIFIER REPORT 


EXECUTIVE SUMMARY 


Background 


e In the last two years, under the auspices of HRDC, the federal/provincial/territorial income 
security programs have undertaken an exploration of the benefits and challenges associated 
with the possible introduction and use of a common client identifier (CCI) for income security 
programs in Canada. For the purpose of this study a common client identifier was defined as: a 
unique means of identifying an individual in an administrative file. The purpose of the study 
was to identify whether there was evidence that a common client identifier could: 


» maintain or enhance privacy and confidentiality; 
ÿ enhance service delivery; 
ÿ streamline program administration; and/or, 
ÿ increase program integrity. 
e Options considered for the purposes of this study for use as a common client identifier included: 
» the status quo, i.e. the current Social Insurance Number (SIN); 
» a “modified” SIN; and, 
ÿ anew number. 


Current State 


° Our research indicated that the provincial and territorial income security jurisdictions are 
already using the SIN as an administrative identifier for their income security clients. In fact, 
approximately 90-100% (depending on the jurisdiction) of provincial/territorial income 
security clients have SIN’s. 


° Our research also indicated that sharing information between HRDC income security programs 
and other federal/provincial/territorial programs is common place under the existing legislative 
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framework. In fact, there are over 100 federal/provincial/territorial agreements in place. The 
key administrative identifier, in addition to name and date of birth, used to facilitate data 
matching is the SIN. There is no centralized coordination of all data matching agreements. 


° There are current issues arising from the inability to identify and authenticate clients within the 
income security programs. Access to the SIN Register by the provinces and territories will 
greatly facilitate verification of the identity of income security and income support applicants. 


° Current data matching processes, evolving partly around the Social Insurance Number, fulfill 
some of the goals of federal/ provincial/territorial income security programs. However, a 
national system that is specifically designed to achieve the goals of verification of identity and 
eligibility which are shared by all IS jurisdictions could be more effective. 


° Most current data matching is re-active in that it occurs after the fact. An up-front, cross 
jurisdictional data matching process to validate client identification could minimize 
inappropriate benefit payment at the outset. 


° As reported earlier to the federal/provincial/territorial committee most of the data collected was 
qualitative rather than quantitative. Very little empirical data was obtained, perhaps due to the 
sensitivity of the subject matter and/or there simply were no hard numbers available. The 
cost-benefit analysis was based in large part on the qualitative evidence at hand. 


Conclusions 


¢ Based on a review of the attached consolidated report and data gathered to date, there is no 
compelling case for introducing a common client identifier. 


* Our research does indicate, however, that consideration could be given to exploring the 
possibility of enhancing the current usage of the SIN to further enhance program integrity, 
improve service delivery and streamline program administration. Steps such as: 


1. under the existing framework, taking full advantage of the SIN register by expanding 
access to the to the provinces and territories to improve identity authentication. 


2. introducing preventative, up-front data matching, rather than after the fact matching 


to validate benefit status, thus minimizing inappropriate benefit payment from 
occurring at the outset; and, 


3. further investigating the Belgian Crossroads Bank model and its applicability to the 


Canadian context. The model offers an interesting example to review. It connects 


eighteen social security agencies, a national register and the European Community 
register. There is no central repository or warehouse of information. Rather the 
model allows member agencies to be aware of the existence of files held in other 
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agencies. All information exchange is reviewed and monitored by an independent 
committee authorized to review all data exchanges and investigate public 
complaints. 


Next Steps 


e There are now several questions/issues that need to be considered: 


1. Based on the work conducted to date, do the federal provincial and territorial income 
security programs agree with the conclusions? 


2. Do the federal/provincial/territorial programs wish to proceed with further 
work/study as described in the above conclusions? 


3. If yes, how will this work/study be funded and coordinated? 
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Common Client Identifier Report 


Introduction 


Over the last few years there has been growing pressure for governments at all levels and 
jurisdictions to address the issues surrounding client identifiers. For government, the question of an 
identifier has become central to the topic of information sharing as a way to provide better services to 


government clients and/or to reduce government costs. 


Service delivery for Human Resources and Development Canada, and for other federal, 
provincial and municipal departments is currently being redefined. Access to services will continue 
to be increasingly provided through alternative mechanisms such as kiosks, telephones and the 
internet. One way to improve service delivery and reduce costs to the public through technology. 


The Scope of a Common Client Identifier 


Client identifiers can span the spectrum from a national identifier to a program specific file 
number. An identifier which covers all residents of a country in all programs can be considered a 
national client identifier since it identifies a client in many unrelated government programs. At the 
other end of the spectrum is a program/context specific number allocated to one program and 
assigned only to the users of that program. One of the important factors when considering a CCI is to 
be aware of and actively manage scope. 


Scope of the Report 


For purposes of this report, a CCI is defined as a unique means of identifying an individual in an 
administrative file. Specifically as a mechanism for uniquely identifying an individual across 
income security programs, such that each individual is linked to one and only one identity. 


Three options were considered: 
e the status quo, i.e. the current Social Insurance Number (SIN); 
¢ a“modified” SIN; and, 
¢ anew number. 


Objective of the Report 


The purpose of this report is to consolidate and synthesize information gathered and determine 
whether there is evidence that a CCI could: 


* maintain or enhance privacy and confidentiality; 


e — enhance service delivery; 
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¢ streamline program administration; and/or, 


* increase program integrity. 


The purpose of this report is to summarize key findings and next steps and present them in a 


format conducive to making informed decisions. 


Today, the SIN has become the administrative identifier for income security programs in 
Canada. Approximately 90-100% of income security program participants have and use the SIN as 
an identifier to interact with the income security programs. The need for a common method for 
governments to identify and “authenticate” their clients has been discussed by governments at all 
levels and in many international jurisdictions. Dependable personal identity information is required 
with almost all interactions with government, from applying for and delivery of financial benefits, 
linking to other programs and services, maintaining case files, to controlling fraud and error. 


Since the late 1980’s, data matching and information sharing agreements between jurisdictions 
have been proliferating, to the point that now there are more than 100 agreements in place between 
federal/provincial/territorial income security programs, with more pending. These have been 
enacted under the existing legal framework. The key administrative identifier, in addition to name 
and birthdate, used to facilitate this data matching is the SIN. Early agreements used name/birthdate 
matching of information, with the SIN as supporting information. Later agreements tend towards 
primary use of the SIN for data matching purposes. There is no ceniral overall management, control 
or coordination of these agreements. 


The Social Insurance Number has become the administrative identifier for information sharing 


between income security programs, Revenue Canada and Immigration programs in Canada. 
There is no centralized coordination of all data matching agreements. 


There are current issues arising from the inability to identify and authenticate clients within the 
income security programs. In the past provinces and territories have not had the authority to access 
the information or share the information with the SIN Register (SIR). Although the provinces and 
territories have legal authority under the Income Tax Act to collect the SIN, access to the SIN 
Register is controlled by the Employment Insurance legislation. 


Recent events have seen SIR policy change in this regard. The Policy branch of the National 
Services division within HRDC and the Canada Employment Insurance Commission have recently 
developed a master memorandum of understanding (MOU) that would extend access to the SIN 
Register to the provinces and territories. Approval of this policy has facilitated the establishment of 
data sharing agreements between the provinces and territories and the SIN Register. At least one 
province (New Brunswick) is currently working with the SIN Register staff to draft an 
information-sharing agreement to allow that province access to SIN Register information. 
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Access to the SIN Register by the provinces and territories will greatly facilitate verification of 


the identity of income security and income support applicants. 


The current array of data matching and information sharing agreements between federal, 
provincial, and territorial income security programs in Canada is the administrative response to the 
need to ensure that benefits are accurate and clients are eligible for those benefits. Each individual 
data match is targeted to determining one particular bilateral “overlap” of benefit issuance. Each of 
these “matches” requires a separate legal agreement between the jurisdictions concerned. 


Most provinces do not have the full complement of potential matches in place, but all provinces 
are working in that direction. Each province has started developing agreements with those 
jurisdictions where the perceived potential for identifying overpayments is highest (Le. 
Employment Insurance and neighboring provinces). 


Current data matching processes, evolving partly around the Social Insurance Number, fulfill 
some of the goals of federal/ provincial/territorial income security programs. However, a 
national system that is specifically designed to achieve the goals of verification of identity and 
eligibility which are shared by all IS jurisdictions could be more effective. 


Most data matching is re-active in that it occurs after the fact. There is no formalized central 


control and management of data matching across ‘all jurisdictions. There is no one agency 
accountable for all data matches. Further study could be done in this area and the exploration of a 
possible solution is proposed later in this report. 


Most current data matching is re-active in that it occurs after the fact. An up-front, cross 
jurisdictional data matching process to validate client identification could minimize 
inappropriate benefit payment at the outset. 


Estimating Costs and Benefits 


A number of difficulties arose in attempting to estimate the costs and benefits for a CCI 
approach. These included: 


The more detailed the implementation plan, the more accurate the cost and benefits estimates 
become. At a high level, before detailed implementation plans (that address exactly how the 
CCI will be used) have been defined, only gross estimates are possible. 


¢ Some of the impact of a Common Client Identifier-supported approach to increased data 


sharing between federal/provincial/territorial programs is in the deterrence factor. Measuring 
“non-occurrences” of overpayments is notoriously difficult. 
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Recouping overpayments that have already occurred (current situation) has a different impact 
on savings than preventing such overpayments from occurring in the first place. However, 
estimating the value of immediate reduction in overpayments against the recouping of perhaps 
the same level of overpayment over time is difficult. 


Some applications of a CCI result in clients being determined ineligible on application or 
identified as ineligible at a later point. This aspect of calculating potential savings is a function of the 
time that the client would have received benefits without the enhanced data sharing process. Many 
jurisdictions have struggled with the selection of an appropriate time period on which to estimate 
savings, with some jurisdictions using only a one-month period for the overpayment, and others 
using various time periods depending on the category of client, and the average time-on-assistance 
for that category. There is no benchmark for calculating benefits paid out and therefore potential 
savings estimates vary significantly from jurisdiction to jurisdiction. 


e Some of the most significant potential costs and benefits to the implementation of a CCI are 
intangible: the ease and speed with which service is delivered, the reduction in the “hassle” 
factor for clients obtaining services and/or increased protection of public funds. Even in the 
face of a potentially high cost-benefit ratio, the fundamental question remains. Is it worth it 
from an intangible perspective? 


e Due diligence was given to collecting pertinent cost-benefit data to determine whether there 
was a CCI business case. Surveys and data gathering were conducted with all provinces and 
territories. Data gathering was also conducted in the international community. 


° As reported earlier to the federal/provincial/territorial committee most of the data collected was 
qualitative rather than quantitative. Very little empirical data was obtained, perhaps due to the 
sensitivity of the subject matter and/or there simply were no hard numbers available. 
Cost-benefit analysis was based in large part on the qualitative evidence at hand. 


e Many of the estimates made would require verification at a later stage with the appropriate 
federal/provincial/ territorial officials. In addition, in order to complete the cost-benefit 


analysis, a number of areas would require additional work regardless. For example: 


1. Workload savings/costs attributable to the implementation of an on-line registration 


and identification process. 


2. Costs to the Income Security programs (federal/provincial/territorial) to “hook up” 


to the registry. 


3. Cost of computer hardware for jurisdictions without network capabilities. 
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Principles for Enhancing Privacy and Confidentiality 


This section clarifies the principles and ethical considerations that must underlie the 
development of any new information sharing system in federal/provincial/territorial income 


security programs using a CCI. 


There are a variety of privacy principles that are in use in the jurisdictions across Canada, 
including the principles embedded in the federal/provincial/territorial privacy legislation, the 
principles developed by the CAR working group, OECD fair information practices principles, the 
Canadian Standards Association. In addition, the Canadian Privacy Commissioner has developed an 
ethical framework for the development of any new technologies for the delivery of government 
programs and services (based on the privacy checklist for technology as set out in the 
Commissioner’s 1992-93 annual report). 


Although the focus of this project has always been the CCI itself, it is the use of the CCI in 
conjunction with technology that has the greatest potential impact on privacy. Thus, an ethical 
framework for technology privacy assessment seems to be the most appropriate framework to assess 
the CCI options. 


1.  Beneficence 


Technology is a tool to help the government deliver service to individuals, not a tool to transfer 
control of an individual’s data to other persons or agencies or to conduct overt and covert 
surveillance on its citizens. 


2. _Non-discrimination 


Technology should not limit government services offered to a client or be a condition for clients 
to have access to government services. 


3. __ Respect 


Technology must properly respect the legal and ethical rules pertaining to the rights of the 
individual to control the usage of their information. 


4. __ Openness/Transparency 


Individuals should have the right to refuse to participate in the use of the system; the right to 


know the nature of the information managed by the system, and the right to understand the nature of 
the situations likely to develop around the use of the system. 


5. Informed Consent 


The individual’s prior consent is required for all uses of their information and any disclosure of 
that information to other bodies. 
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6. Access 


Individuals have the right of access to and correction of the information held about them by the 
system. 


7.__Matching 


Government should ensure that multi-use applications are segregated to prevent merging or 
cross-matching of data. 


8. _Gate-Keeping 


Government has the duty to guarantee the confidentiality of all communications and 
transmissions surrounding the use of the system. 


9. Responsibility 


Government has the duty to ensure that those operating and maintaining the system exercise the 
highest standard of responsibility. Each new application should be monitored for adherence to 
general privacy principles. 


In considering the development of an infrastructure to facilitate information sharing, it would 
be important to ensure the proper safeguards, both technological, privacy and legal, are in place. In 
addition, careful attention should be paid to the overall management, control and accountability 
structures. This framework could be used to assess the privacy impacts. 


A Possible Model for the Future 


The Belgian Crossroads Bank may be an attractive model to review and to assess in the 


Canadian context. 


The Belgian Crossroads Bank connects eighteen social security agencies as well as the national 
register and the European Community register. Information exchange takes place either by means of 


on-line, time-delayed electronic exchange or by tape match. 


There is no central repository or data warehouse of information, rather the Crossroads Bank is 
predicated on a network of social security systems. When an institution requires information it 
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makes a request to the Crossroads Bank. If the request is legitimate and has received prior approval 
by the Comité de Surveillance, the Bank verifies whether the information is available. The 
information is then transferred to the Bank and forwarded to the requesting institution. 


This model is based on obligatory participation of all social security institutions. Each 
individual is identified within the network of income security systems based on a unique 
identification key (a number). Data storage is decentralized and distributed among the institutions 
that are responsible for interacting and servicing the client. All information exchanges must go 
through the Crossroads Bank and be authorized by a “Control Committee”. All information 
exchanges are recorded. The Crossroads Bank contains three reference directories: 


1. A person directory identifies where individuals have personal files within the social 
security institutions and for what periods. 


2. A data availability table identifies what type of data is available from each social 
security institution. 


3. An access authorization table indicates what type of data may be transmitted to which 
institutions for which type of files. 


Applying the Model to Canada 


e For a model to work successfully, in the Canadian context, it would have to: 


° — respond to the distributed administrative and delivery network of income security programs in 
Canada; 


¢ provide confirmation of identity in a pro-active manner; 

¢ provide accurate information about an individual’s in-pay status on timely basis; 
° — provide centralized coordination of data matching. 

e  facilitate accurate data matching and guard against unethical matching; 


¢ address the concerns of the citizenry and the Privacy Commissioners with respect to privacy 
and confidentiality. 


Responding to the Distributed Nature of the Canadian IS System 


This model may be suited to meet the needs of the distributed nature in which Canadian 
programs are delivered among the federal, provincial/territorial and municipal levels of 
government. The Belgian model does not compromise the delivery structure of the IS programs. In 
fact, the model pre-supposes that delivery of programs and collection and maintenance of program 
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PAOREMOn is the responsibility of the particular program within the delivery network. Because 
information is not centralized in one location but distributed and decentralized, data would continue 
to be stored and maintained by the various programs and different levels of government that are 
currently responsible for the information. The different data bases and systems would be linked into 
the network regardless of their geographic location or level of government. This particular model is 
predicated on having information reside in the location in which it is managed. Modern technology 


allows this information to be connected and shared regardless of where it is located or by which level 
of government it is managed. 


Accurate Data Matching and Guarding Against Unethical Matching 


All data matching is done via the Crossroads Bank. Most of the “standard” matches are 
pre-approved and conducted automatically on a scheduled basis resulting in timely and effective data 
matching. There are several safeguards in place to ensure unethical matches do not occur. 


e all matching is done via the Crossroads Bank. There are no matches that occur between 
individual institutions, thus all matching activity is surveyed; 


e all data matches have been pre-approved by the “Comité de Surveillance” (Control 
Committee); 


ÿ The Control Committee is an independent body appointed by Parliament to review 
and authorize all data exchanges and review and investigate complaints made by the 
public. The Committee prepares an annual report of its work to Parliament. 


e all matching activity is recorded and tracked; and 


° each social security institution has their own security department to monitor and oversee 


matching activity. 


Thus the Belgian model has a built in watch dog function by requiring all matching to occur 
through the Bank and not on a program to program basis. This watchdog function is already in place 
in the form of the privacy commissioners in Canada. As a result, any model developed could build on 
the current role of the federal and provincial/territorial privacy commissioners. 


Accurate Information About In-Pay Status 


The Crossroads Bank model contains pointer files that indicate where information can be 


obtained on the in-pay status of clients. This information is assessed prior to benefit payment 


minimizing the occurrence of mis-payment. 


n model, a pointer file could be created to indicate that an individual is 


Similarly, in a Canadia | | 
in-pay status information is available under the auspices of the 


in-pay of a particular benefit. Today, 
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current data sharing agreements, however each agreement is separate and may not cover the whole 


spectrum of income security programs. 


In a future scenario, if participation of all income security programs is obligatory, ali 
complete information will be available to determine the eligibility of a client to receive benefit 
payment. This information could be made available up-front reducing incorrect payments before 
they can occur. If, in a particular case, further information is required, then the institution may go 
through the central Bank to request additional data on the individual’s file if such information 


sharing is authorized. 


Providing Identity Authentication 


Access to a central register of basic tombstone data is a cornerstone in the Belgian concept. 
Information contained in the national register captures life events and basic tombstone information 
to assist with identity confirmation. However, like all data sharing within this model, the sharing of 
information has to be pre-approved by the Comité de Surveillance. 


In the Canadian context, a similar identity authentication could be validated through the SIN 
register. With current policy changes that provide access to the SIN register, it is now possible for all 
jurisdictions to access tombstone information allowing for improved identity verification. 


Addresses the Privacy and Confidentiality Concerns 


It can be hypothesized that the Belgian model would address many of the concerns and fears of 
Canadian citizens and Privacy Commissioners with respect to privacy and confidentiality. This 
model is not predicated upon the creation of a data warehouse, rather a simple network of separate 


income security systems is joined together under the watchful eye of the Crossroads Bank and the 
“Control Committee”. 


As stated earlier, under the current Canadian structure there are a multitude of separate data 
sharing agreements. There are inter-provincial/territorial data sharing agreements, 
provincial/territorial-federal agreements and provincial/territorial-municipal arrangements already 


in place creating a intricate web of non-standardized information sharing agreements. As it stands in 


most cases today, these agreements have been reviewed and approved by the respective privacy 
commissioners. 


Replacing this web with a formalized model similar to the Belgian model would not radically 


change the current Canadian structure. Instead of sharing information from institution to 
institution, this information would pass v 


la a central authority whose role it would be to monitor 


: to the method in which information is transferred within the 
income security sphere. This model could improve upon the current ramework 


and ensure regularity and formality 
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The diagram below provides a pictorial view of a possible future state model for Canada based 
on the Belgian model. 
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As stated earlier, this example of a possible future state is “food-for-thought’. It should not be 
considered as a solution framework. Further research on the Belgian or similar models is required if 


this path is to be pursued. A hypothetical description of how this model could function is presented in 
the following paragraphs. 


At the centre of the proposed model sits a Board (perhaps comprised of federal/provincial/ 
territorial privacy commissioners) with several key roles: Their role should include the following 
functions: 

° supervising and directing information security overall; 
° — reviewing and authorizing/denying each data matching scenario before it occurs; 


° handling and responding to complaints; and 


° providing information security recommendations. 
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No client data would be held within the “central access control”. It is at the centre where the “ 
pointer files” would be located. Pointer files would indicate in which programs ESS “i 
information (person directory); what type of data was available by each program (HORS 
directory); and which program was allowed to access what type of data (authorization AIRE 
Because this information is, in and of itself, a compilation of data, it would be important to ascertain 
whether it was permissible under today’s legislative framework to develop these pointer files or 
whether legislation or policy changes would be required to create this “new information”. 


In the hypothetical model, when a new applicant applies for an income security benefit, the 
applicant would apply to the appropriate program. Program staff would gather basic tombstone and 
eligibility information from the applicant and verify through the income security program network 
the individual’s identity and in-pay status in other income security programs. Information on the 
client’s in-pay status and personal data would be verified through the central access control (central 
bank) and the information would be passed back to the host program to determine eligibility based on 
the results of the data search. Pending approval, the client could then receive benefit payments 
according to his or her eligibility. 


Each program within the income security network would be responsible for maintaining both 
their client information and program information up-to-date. Each program would continue to be 
responsible for ensuring that security and privacy of their own specific data is maintained and 
secured on an on-going basis. 


Conclusions 


Based on a review of the consolidated report and data gathered to date, there is no compelling 
case for introducing a common client identifier. 


Our research does indicate, however, that consideration could be given to exploring the 
possibility of enhancing the current usage of the SIN to further enhance program integrity, improve 
service delivery and streamline program administration. Steps such as: 


I. under the existing framework, taking full advantage of the SIN register by expanding 
access to the to the provinces and territories to improve identity authentication. 


2. introducing preventative, up-front data matching, rather than after the fact matching, 


to validate benefit status, thus minimizing inappropriate benefit payment from 
occurring at the outset; and, 


3. further investigating the Belgian Crossroads Bank model and its applicability to the 
Canadian context. The model offers an interesting example for to review. It connects 
eighteen social security agencies, a national register and the European Community 
register. There is no central repository or warehouse of information. Rather the 
model allows member agencies to be aware of the existence of files held in other 
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agencies. All information exchange is reviewed and monitored by an independent 


committee authorized to review all data exchanges and investigate public 
complaints. 


Next Steps 


e There are now several questions/issues that need to be considered: 


1. Based on the work conducted to date, do the federal provincial and territorial income 
security programs agree with the conclusions? 


2. Do the federal/provincial/territorial programs wish to proceed with further 
work/study as described in the above conclusions? 


3. If yes, how will this work/study be funded and coordinated? 
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APPENDIX E — RECOMMENDATIONS 

from the Report of the House of Commons 
Standing Committee on Human Rights and the Status of 
Persons with Disabilities 


Privacy: Where Do We Draw The Line? 
April 1997 


RECOMMENDATION 1 


The Committee recommends that the Government of Canada recognize and act 
upon its responsibility to respect and protect privacy rights in Canada by enacting a 
declaration of privacy rights to be called the Canadian Charter of Privacy Rights. 
This Privacy Charter would apply within federal jurisdiction, take precedence over 
ordinary federal legislation and serve as a benchmark against which the 
reasonableness of privacy infringing practices and the adequacy of legislation and 
other regulatory measures would be assessed. 


Furthermore, the Committee recommends that the Canadian Charter of Privacy 
Rights be enacted no later than the Ist of January 2000. 


RECOMMENDATION 2 


The Committee recommends that the Canadian Charter of Privacy Rights declare 
and entrench fundamental privacy rights and the responsibilities attaching to these 
rights. These rights and responsibilities would include, but not necessarily be limited 
to, the following: 


1. Fundamental Privacy Rights and Guarantees 
1.1. Everyone is entitled to expect and enjoy: 
° physical, bodily and psychological integrity and privacy; 
° privacy of personal information; 
e freedom from surveillance; 
° privacy of personal communications; 


° privacy of personal space. 
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1.2 Everyone is guaranteed that: 


¢ these privacy rights will be respected by others adopting whatever 
protective measures are most appropriate to do so; 


¢ violations of these privacy rights, unless justifiable according to the 
exceptions principle which follows, will be subject to proper redress. 


2. Justification for Exceptions 


Exceptions, permitting the rights and guarantees set out above to be infringed, will 
only be allowed if the interference with these rights and guarantees is reasonable and 
can be demonstrably justified in a free and democratic society. . 


3. General Obligations 


3.1. The basic duties owed to others to ensure their privacy rights are 
adequately respected include: 


e the duty to secure meaningful consent; 


e the duty to take all the steps necessary to adequately respect others’ 
privacy rights or, if their rights must be infringed, to interfere with privacy 
as little as possible; 


e the duty to be accountable; 

e the duty to be transparent; 

e the duty to use and provide access to privacy-enhancing technologies; 

° the duty to build privacy protection features into technological designs. 


4. Specific Rights Related to Personal Information 


e Everyone is the rightful owner of their personal information, no matter 
where it is held, and this right is inalienable. 


Everyone is entitled to expect and enjoy anonymity, unless the need to 
identify individuals is reasonably justified. 


5. Specific Obligations Related to Informational Privacy 


5.1. The basic duties owed to others to ensure their informational privacy rights 


are adequately respected include, in addition to the general obligations set 
out above: 
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the duty to hold sensitive personal information in trust; 


the duty to limit information collection to what is necessary and justifiable 
under the circumstances; 


the duty to identify the purpose for which personal information is 
collected; 


the duty to ensure the information collected is correct and of the highest 
quality; 


the duty to provide the people whose personal data is collected with access 
to that information and a means to review and, if they judge it necessary, to 
correct it; 


the duty to only use and disclose personal information for the purposes 
identified when meaningful consent was obtained; 


the duty to keep personal information only for as long as is necessary and 
justifiable; 


the duty not to disadvantage people because they elect to exercise their 
rights to privacy. 


RECOMMENDATION 3 


The Committee recommends that the Canadian Charter of Privacy Rights declare 
that to achieve proper respect for privacy rights in Canada the following measures 


are essential: 


ongoing public discussion and input on matters related to the protection of 
privacy rights; 


research related to privacy rights and their protection; 


public awareness and education to sensitize everyone to their rights and 
responsibilities with respect to privacy. 


RECOMMENDATION 4 


The Committee recommends that the Canadian Charter of Privacy Rights declare 
that, to ensure the core privacy principles are observed, the following measures must 


be put in place: 


proper compliance, accountability and enforcement mechanisms; 


appropriate remedies to redress violations of privacy rights. 
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The Committee further recommends that the Canadian Charter of Privacy ee 
declare that the Privacy Commissioner of Canada shall exercise general oversight 
and protection of privacy rights within areas of federal jurisdiction. 


RECOMMENDATION 5 


The Committee recommends that the Minister of Justice, in consultation with the 
Privacy Commissioner of Canada, examine existing federal legislation and 
regulations, bills and draft regulations for consistency with the Canadian Charter of 
Privacy Rights and report any inconsistency to Parliament. This report shall be 
referred to the appropriate parliamentary committee for consideration and 
recommendations. 


The Committee also recommends that the Canadian Charter of Privacy Rights 
require the Minister of Justice to notify the Privacy Commissioner of Canada of all 
bills tabled in Parliament and all draft regulations which may have ramifications for 
privacy. 


RECOMMENDATION 6 


The Committee recommends that the Government of Canada take a leadership role 
to ensure that Canadians’ privacy rights are accorded equivalent dignity across the 
country. The Government of Canada should invite the governments of the provinces 
and territories to work together to develop a complementary and uniform approach 
to privacy protection across Canada that would accord with the Privacy Charter. 


RECOMMENDATION 7 


The Committee recommends that the Government of Canada, federal agencies and 
all Crown corporations identify privacy issues in their respective workplaces and 
institute appropriate measures that accord with the Privacy Charter to safeguard 
employees’ privacy rights. 


RECOMMENDATION 8 


The Committee recommends that the Government of Canada introduce into 
Parliament comprehensive data protection legislation to be known as the Data 
Protection Act to replace the current Privacy Act. This Act must accord with the 
Privacy Charter and apply to Parliament, all federal government departments, 
agencies, Crown corporations, boards and commissions, and other institutions, and 


to all federally regulated businesses and industries. The Data Protection Act shall be 
enacted no later than the Ist of January 2000. 
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A broad and open process of public consultation shall precede the introduction of 
this legislation and provision shall be made in the Act for comprehensive public 
review of its provisions and operations within five years of the proclamation of the 
Act, and at regular intervals thereafter. 


The Government of Canada shall give due consideration to other data protection 
models, such as the Canadian Standards ‘Association’s Model Code for the 
Protection of Personal Information and the New Zealand Privacy Act 1993, when 
developing the Data Protection Act. The Data Protection Act shall recognize the role 
of federally regulated industries in the development of their own privacy codes. 


RECOMMENDATION 9 


The Committee recommends that the Data Protection Act it proposes contain: 


° strict protections against all unnecessary intradepartmental and 
interdepartmental data matching; 


e standards for acceptable data matching practices; 


¢ acceptable data matching practices that comply with the Privacy Charter, 
in particular the principles of informed consent and transparency. 


RECOMMENDATION 10 

The Committee recommends that to comply with the proposed Data Protection Act, 

the Treasury Board Secretariat, a central agency of the federal government must: 
° create mandatory data matching guidelines; 


° monitor federal government departments for compliance with the new 
guidelines; 
° educate federal departments and employees on what constitutes 


unnecessary data matching practices. 


RECOMMENDATION 11 


The Committee recommends that the proposed Data Protection Act shall set out the 
circumstances under which data sharing between the federal and provincial 


governments is appropriate. 


The Government of Canada should advise the provinces and territories that upon 
the enactment of the proposed Data Protection Act, all personal information shall 
only be shared with those provinces that have adequate data protection in place. 
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RECOMMENDATION 12 
The Committee recommends that the proposed Data Protection Act must apply to: 
° any personal information transferred from federal government 
institutions to the private sector; 


° any contracts for providing services to federal government institutions. 
RECOMMENDATION 13 


The Committee recommends that: 


° the Treasury Board Secretariat take responsibility for monitoring 
compliance by federal departments and agencies with the proposed Data 
Protection Act; 


e the Minister of Industry take responsibility for monitoring compliance by 
the federally regulated private sector with the proposed Data Protection 
Act; and 


+ the federal Privacy Commissioner be made responsible for ensuring 
enforcement of the proposed Data Protection Act and that penalties exist in 
the proposed act for violations of its provisions. 


RECOMMENDATION 14 


The Committee recommends that the Data Protection Act regulate the development, 
testing (including pilot projects), implementation and application of emerging 
technologies that have a potential to infringe on the privacy of personal information. 
These technologies would include, but not be limited to, smart cards and biometric 
identification systems. 


RECOMMENDATION 15 


The Committee recommends that the Government of Canada take immediate action 


to deal with privacy violations and discriminatory treatment that may result from 
genetic testing including: 


° a review of current policies and practices in the employment, health, 
insurance and criminal justice sectors; 


a review of existing reports and existing and proposed legal instruments 
(including the draft international covenant on the human genome); 
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* consultations with the public; 


¢ the development of legislation that is necessary to deal specifically with the 
privacy and antidiscrimination issues related to genetic testing. 


RECOMMENDATION 16 


The Committee recommends that the Government of Canada introduce 
amendments to the Criminal Code that would, to the greatest extent possible, apply 
the prohibitions against the interception of private communications to surreptitious 
video surveillance. 


RECOMMENDATION 17 


The Committee recommends that the Government of Canada, in particular 
Industry Canada, encourage the development and use of privacy-enhancing 
technologies by: 


¢ developing partnerships and creating incentives for research and 
development into privacy-enhancing technologies; 


¢ educating the public and businesses (large and small) about the capacity of 
privacy-enhancing technologies to protect the personal information of 
Canadians. 


RECOMMENDATION 18 


The Committee recommends that the Government of Canada undertake ongoing 
public awareness and education programs about new technologies and their impact 
on privacy to ensure that everyone is able to make appropriate decisions regarding 
their personal privacy and the direction of public policy in the future. 


The Committee further recommends that the Government of Canada undertake an 
ongoing public consultation process that examines and makes recommendations 
about specific legislative and non-legislative measures that are required to ensure 
that individuals’ privacy is protected as technologies are refined or brought into use. 


The Committee further recommends that the Government of Canada initiate 
ongoing discussions with the provinces with a view to encouraging a common 
approach to the treatment of these technologies (particularly genetic testing) within 


different jurisdictions. 


RECOMMENDATION 19 


e The Committee recommends that the Government of Canada table in 
Parliament new legislation that would replace the current Privacy Act, to be 
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called An Act Respecting the Office of the Privacy Commissioner of 
Canada. This act would broaden and strengthen the mandate and powers 
of the Privacy Commissioner in relation to all issues of privacy within the 
federal sector. Specifically, it should contain, but not be limited to, 
provisions that empower the Privacy Commissioner to: 


° receive, investigate and settle complaints of alleged privacy invasions; 


¢ initiate his own privacy investigations through the use of privacy audits 
and technology impact assessments; 


° carry out studies relating to privacy and emerging technologies; 


e review all government bills, legislation, regulations, delegated legislation, 
policies and practices that may have an impact on privacy rights and, 
whenever appropriate, table a privacy impact statement before the House 
of Commons; 


° ensure effective enforcement of the proposed Data Protection Act. 


This Act shall apply to Parliament, all federal government departments, agencies, 
Crown corporations, boards, commissions and government institutions and to the 
federally regulated private sector. 


This Act shall contain complaint review mechanisms such as an administrative 
tribunal and the provision for judicial review. 


RECOMMENDATION 20 


The Committee recommends that the introduction of An Act Respecting the Office 
of the Privacy Commissioner must: 


¢ be preceded by a broad and open public consultation process; 


° provide for a comprehensive public review of its provisions and operations 


within five years of the proclamation of the act and at regular intervals 
thereafter; 


* assign a general public education mandate to the Privacy Commissioner. 
RECOMMENDATION 21 
The Committee recommends that Parliament provide sufficient resources to the 


Office of the Privacy Commissioner to adequately carry out its proposed 
responsibilities. 
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Dissenting Report to the Report on Privacy Issues 
produced by the Standing Committee on Human 
Rights and the Status of Persons with Disabilities 


Reform considers it essential for the government to be part of the growing debate over the 
impact of modern technology on privacy rights and was glad to participate in the recent 
review performed by the Standing Committee on Human Rights and the Status of Persons 
with Disabilities. 


The opportunity the Committee afforded for Canadians to engage in the public debate was 
important. Reform, however, is compelled to dissent to the final report issued by the 
Committee on this study because of the lack of recognition given to the scope of opinion 
submitted by Canadians from across the country. 


Many Canadians recognize the value of some form of regulation or legislation that 
recognizes the competing interests involved in this complex issue. Many groups, including 
Industry Canada, recommended a “multi-pronged” approach where responsibility is 
shared between the government and other interested parties. This would likely include a 
measure of self-regulation by businesses in the privacy domain. 


Instead the government, in standard fashion, has chosen the most narrow and 
heavy-handed approach by opting to recommend consolidating all power in the federal 
government, and in particular, under the Privacy Commissioner, greatly expanding the role 
and responsibilities of the Privacy Commissioner without any apparent consideration of 
the costs involved or the efficiency of the process. 


The Canadian Human Rights Commission (CHRC) seems to mirror many of the functions 
of the proposed expanded Privacy Commission, but has been ignored as either a source of 
experience or a possible mechanism for the regulatory process. 


According to the government, privacy rights are not congruent with those rights addressed 
by the CHRC since they do not represent historically-defined discrimination. 


However, if the government adjusts this qualification on the definition of the rights 
addressed by the CHRC, the Commission could then focus on real and present rights’ 
violations. This would facilitate a more equitable approach to rights violations. And if 
privacy is an “inalienable human right” as it maintains, it could be included in the 


Commission’s portfolio. 


Another recommendation of the Committee has potentially serious ramifications on the 
constitutional distinctions between federal and provincial jurisdictions. In what appears to 
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be a very heavy-handed approach to enforcing privacy rights, the committee has 
recommended that federal governments cease data sharing with provinces unless the 
provinces implement reforms to privacy protection that meet the approval of the federal 
government. Thus legislation and regulation intended for application in the federal 
government and federally-regulated organizations will have much farther reaching 
implications. 


The government's interest in enforcing privacy rights also rings hollow in view of its 
opposition to respecting property rights. With years of pressure and continuing inattention 
to the area of property rights, why is there now awill to exclusively pursue the related area of 
privacy? 


Several bills illustrate “regulatory creep” and the government’s disregard for property and 
privacy rights: 


Bill C-68 significantly weakens Canadians’ protection from search and seizure measures, 
increasing the ease of access of police officers to private property. 


Bill C-71 also permits search and seizure without a warrant. While these two bills still 
maintain a measure of protection regarding dwelling places, Bill C-76, the Drinking Water 
Safety Act, of all pieces of legislation, goes even further. This bill, concerned with the 
regulation of bottled water, includes provisions for permitting access even to a person’s 
home without a warrant. Little by little, the government is abandoning the historical rights 
and freedoms of Canadians while trying to claim the high ground by appearing concerned 
about new, complex issues that are more difficult to define. 


Extreme proposals advanced in some circles on behalf of so-called children’s rights have 
also found a friendly ear in some corners of the Liberal government. Such proposals, 
including the repeal of Section 43 or the privacy rights of children over and above the rights 
of parents, threaten the protection afforded to children and their families in the private 
sanctuary of the home. Such infringements threaten to destroy institutions and 
relationships Canadians have long taken for granted. 


The violations of privacy made possible through more and more Liberal legislation sends a 
contradictory message to the recommendations proposed by the Committee on the 
limited scope of privacy issues addressed by the Committee. It suggests that the 
government lacks a comprehensive underlying philosophy that takes into account the 
priorities of Canadians and reflects the expected level of respect for their rights. 


The Reform Party supports the involvement of the government in the public debate over 


privacy issues. The purpose of public debate, however, is to inform the government of the 
views and concerns of Canadians. 
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In consideration of the government report however, the Reform Party recommends greater 
responsibility and freedom be extended to individuals and businesses to choose and 
implement standards and measures that also respect the expectations of Canadians. 


We recommend a re-examination of the singular proposal to use a greatly expanded 
Privacy Commission as the structure for the regulatory body. 


Finally, we express our reservations over the rush in which the final report was produced 
which should have allowed more opportunity for careful examination of its proposals and 
their consequences. The Reform Party trusts that the public consultation proposed by the 
recommendations will produce results that do indeed represent the wishes and 
expectations of the broadest possible spectrum of Canadians. 
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Request for Government Response 


Your Committee requests that the Government table a comprehensive response to 
recommendations 9 and 15 by September 30, 1999 and to the remainder of the report within 150 days 
in accordance with the provisions of Standing Order 109. 


A copy of the relevant Minutes of Proceedings of the Standing Committee on Human 
Resources Development and the Status of Persons with Disabilities (Meetings Nos. 45, 47, 48, 49, 
50, 51, 53 and 55 which includes this Report) is tabled. 


Respectfully submitted, 


Albina Guarnieri, M.P. 
Chair 
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MINUTES OF PROCEEDINGS 


TUESDAY, APRIL 27, 1999 
(Meeting No. 55) 


The Standing Committee on Human Resources Development and the Status of Persons with 


Disabilities met in camera at 11:07 a.m. this day, in Room 705, La Promenade Building, the Chair, 
Albina Guarnieri, presiding. 


Members of the Committee present: Diane Ablonczy, Bonnie Brown, Brenda Chamberlain, 
Hec Clouthier, Paul Créte, John Godfrey, Albina Guarnieri, Dale Johnston, John O’Reilly, The Hon. 
Andy Scott and Bryon Wilfert. 


In attendance: From the Library of Parliament: Sandra Harder and Bill Young, Research 
Officers. 


Pursuant to Standing Order 108(2), consideration of Chapter 16 (Human Resources 
Development — Management of the Social Insurance Number) of the September 1998 Report of the 
Auditor General of Canada (See Minutes of Proceedings of Wednesday, November 4, 1998) 


By unanimous consent, 


It was agreed, — That the draft report (as amended) on: Beyond the Numbers: The Future of the 
Social Insurance Number System in Canada be adopted as the Fourth Report of the Standing 
Committee on Human Resources Development and the Status of Persons with Disabilities. 


It was agreed, — That the Clerk be authorized to make such editorial and typographical 
changes as necessary without changing the substance of the Report. 


It was agreed, — That the Chair be authorized to present the Report to the House. 


It was agreed, — That, the Committee request that the Government table a comprehensive 
response to recommendations 9 and 15 by September 30, 1999 and to the remainder of the report 
within 150 days in accordance with the provisions of Standing Order 109. 


It was agreed that a press release be prepared and sent and a press conference be arranged 
immediately following tabling of the Report in the House. 


At 11:28 a.m., the Committee adjourned to the call of the Chair. 
Danielle Belisle 


Clerk of the Committee 
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